Since the gatekeeper service runs as gatekeeper user i believe you need to set owner here. something like:
sops.secrets.gatekeeperEnv={sopsFile=./gatekeeper.env;key="";owner="gatekeeper";group="gatekeeper";#also you could put it directly into the gatekeeper state dir if permissions problems remain:path="/var/lib/gatekeeper/.env";};
Since the gatekeeper service runs as gatekeeper user i believe you need to set owner here. something like:
```nix
sops.secrets.gatekeeperEnv = {
sopsFile = ./gatekeeper.env;
key = "";
owner = "gatekeeper";
group = "gatekeeper";
#also you could put it directly into the gatekeeper state dir if permissions problems remain:
path = "/var/lib/gatekeeper/.env";
};
```
I wonder if it works to have the env vars as individual secrets? I thought you need to put the whole env file in one variable, something like:
```yaml
gatekeeper_env: |
FOO=whatever
BAR=morewhatever
BAZ=helloworld
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
kalipso
@@ -62,1 +69,3 @@sops.secrets.gatekeeperEnv = {sopsFile = ./gatekeeper.env;key = "";Since the gatekeeper service runs as gatekeeper user i believe you need to set owner here. something like:
@@ -0,0 +10,4 @@CALDAV_USER =ENC[AES256_GCM,data:+BSTNCi7mULdWhM1oa06,iv:UlpkZTEmvuktC0daH4nBm0kaJiIaWt8DVL+wMLBjuxo=,tag:RfX5dbLBtJ0FfSXVxlW99w==,type:str]CALDAV_PASSWORD =ENC[AES256_GCM,data:TXUBlhjge6b3Uu0BH/IJ53zqGAAVF8/XhvXVHuhgmi8=,iv:oSDpRWTP/jP06ZS4diwcUdAAnI+GSIomY+IbIERki4E=,tag:RKNW99kkZd5WmOe2poFM1A==,type:str]CALDAV_CALENDARS =ENC[AES256_GCM,data:0T42oZqIDFgUegGBzw==,iv:LFYzH4Ej+Aavugg3lRaR+rP4ZGjDUPyTbxwTc9DChgc=,tag:IPx04P8KFW6vfN6UTKJPIA==,type:str]CALDAV_REFRESH_INTERVAL =ENC[AES256_GCM,data:/tHX+A==,iv:I7JNh30TMyT5L8cLPGINTxZVUXzk94nix4tMHfIHKlI=,tag:flZqije+8tsQXL68nEewnQ==,type:str]I wonder if it works to have the env vars as individual secrets? I thought you need to put the whole env file in one variable, something like: